Skip to content

Exploit Radar Choose my productsProducts My radar

Products › Brands

Brand

ServiceNow: actively exploited vulnerabilities

2 vulnerabilities in ServiceNow products (Now Platform) are in CISA’s catalog of exploited vulnerabilities. Last added: July 29, 2024.

0 vulnerabilities added in the last 12 months
2 exploited vulnerabilities in the catalog, in total
0 added in the last 30 days

By category

Add just one ServiceNow category to your radar, or open its page.

Monitoring, ITSM and asset management 2 vulnerabilities

A high count also reflects how widely a product is deployed and how much attackers care about it: it is not a security rating.

Affected products

Now Platform 2 vulnerabilities · Monitoring and ITSM

Name used by CISA: ServiceNow. Product families: indicative classification by this site.

Patch first

In the order of the main list (Patch first): recent additions first, then the most severe. The number is the rank within this ServiceNow list.

Rank 1ServiceNow Now Platform
CVE-2024-4879
ServiceNow Improper Input Validation Vulnerability
Added more than a year ago: ranked by severity.
Added
Jul 29, 2024
CISA deadline
21 days
CVSS severity
9.8 (critical)
Rank 2ServiceNow Now Platform
CVE-2024-5217
ServiceNow Incomplete List of Disallowed Inputs Vulnerability
Added more than a year ago: ranked by severity.
Added
Jul 29, 2024
CISA deadline
21 days
CVSS severity
9.8 (critical)

Indicative classification, based on the vendor and product names given by CISA. How products are classified.